Network Administration and Systems Services

Dark fiber ring

Discussions with vendors have identified key questions and issues Should the COE use the consortium to bid for the dark fiber ring(s) and equipment? How does COE estimate cost for districts to consider the solution? The cost of the dark fiber equipment

Dark fiber construction RFP being finalized The purpose is to “test the waters” Example requirements Provide pricing for individual segments between nodes (district office sites) Provide various pricing models for proposed rings Lowest cost Most sites which can be included Optimal ring configuation for future expansion

Dense Wavelength Division Multiplexing DWDM Multiple traffic channels on a fiber pair Each channel transmitted on a different wavelength/color prevents channel interference and allows them to be separated at the receiving end STM-16 Tx STM-16 Rx STM-16 Tx STM-16 Rx STM-16 Tx STM-16 Rx STM-16 Tx

Anatomy of a DWDM System Client – The source of the signal requiring transport Transponder/Muxponder/Xponder – Converts short reach MM or SM client laser to DWDM. Not necessary when using client-based DWDM pluggable optics Multiplexer/Demultiplexer – Passive device which multiplexes (and demultiplexes) multiple DWDM wavelengths to/from the fiber ROADM – Wavelength Add/Drop and Multi-Directional Switching Amplifier – needed depending upon distance/loss RX TX RX TX RX Client (router, switch, etc.) ‘SponderMultiplexer / Demultiplexer Amplifier(s) ROADM ONS Chassis same chassis ONS Chassis

NCS 2000 Chassis Options NCS RU 2 service slots, 1 processor AC or DC power 200+G per slot NCS RU 6 service slots, 2 processors Redundant AC or DC power 200+G per slot NCS 2015 Coming end-CY RU 15 service slots, 2 processors 250+G per slot

ISP Moving forward with 100G in the next e-rate year A second 10G link from CENIC is being added in the interim

Storage Backup and Replication Services Volumes Replicated = 22 Data replicated approx. 8TB

Firewall services

Barracuda NG Firewall Barracuda NG firewall with Security Suite has been discontinued Multi-tenancy model is no longer supported Stand-alone NG Firewall continues to be offered SCCOE will not be utilizing Barracuda to offer firewall services

Palo Alto Networks SCCOE has put a bid out for a PA network processing cards (NPC) NPC option 1: 2x40 Gig QSFP, 12x10 Gig SFP+ All district connections will be consolidated to PA-7050 UI and administration will remain the same Migration and customer training challenges factored into decision to remain with Palo Alto

Palo Alto Networks Cut-over will be scheduled and coordinated with districts New platform will allow for additional customers to leverage firewall services

Palo Alto Networks SCCOE is reviewing the price structure for firewall services Update likely to be based upon a tiered service model Palo Alto Networks has invited COE and school districts to a half-day technology briefing at the HQ Executive Briefing Center Agenda will include technology overview, roadmap and best practices Date to be determined, likely middle to late March timeframe